File: signer.go

package info (click to toggle)
golang-github-containerd-nydus-snapshotter 0.13.4-2.1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 3,824 kB
  • sloc: sh: 470; makefile: 129
file content (40 lines) | stat: -rw-r--r-- 705 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
/*
 * Copyright (c) 2020. Ant Group. All rights reserved.
 *
 * SPDX-License-Identifier: Apache-2.0
 */

package signer

import (
	"crypto"
	"crypto/rsa"
	"crypto/sha256"
	"crypto/x509"
	"encoding/pem"
	"io"
)

type Signer struct {
	publicKey *rsa.PublicKey
}

func New(publicKey []byte) (*Signer, error) {
	block, _ := pem.Decode(publicKey)
	key, err := x509.ParsePKCS1PublicKey(block.Bytes)
	if err != nil {
		return nil, err
	}
	return &Signer{
		publicKey: key,
	}, nil
}

func (s *Signer) Verify(input io.Reader, signature []byte) error {
	h := sha256.New()
	_, err := io.Copy(h, input)
	if err != nil {
		return err
	}
	return rsa.VerifyPKCS1v15(s.publicKey, crypto.SHA256, h.Sum(nil), signature)
}